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Abstract — In order to cope with situations in which a plant's 
dynamics are not precisely known, we consider the problem of 
supervisory control for a class of discrete event systems modelled 
by fuzzy automata. The behavior of such discrete event systems is 
described by fuzzy languages; the supervisors are event feedback 
and can disable only controllable events with any degree. The 
concept of discrete event system controllability is thus extended 
by incorporating fuzziness. In this new sense, we present a 
necessary and sufficient condition for a fuzzy language to be 
controllable. We also study the supremal controllable fuzzy sub- 
language and the infimal controllable fuzzy superlanguage when a 
given pre-specified desired fuzzy language is uncontrollable. Our 
framework generalizes that of Ramadge-Wonham and reduces 
to Ramadge-Wonham framework when membership grades in 
all fuzzy languages must be either or 1. The theoretical 
development is accompanied by illustrative numerical examples. 

Index Terms — Discrete event systems, fuzzy systems, con- 
trollability, supremal controllable fuzzy sublanguage, infimal 
controllable fuzzy superlanguage. 

I. Introduction 

A DISCRETE event system (DES) is a dynamic system 
with discrete states that are event-driven. The prin- 
cipal features of such systems are that they are discrete, 
asynchronous, and possibly nondeterministic. DES arise in a 
variety of contexts ranging from computer operating systems 
to the control of complex multimodel processes. DES theory, 
particularly on modelling and control, has been successfully 
employed in many areas such as concurrent program se- 
mantics, monitoring and control of complex systems, and 
communication protocols. The behavior of DES is described 
as the sequences of occurrences of events involved. In order to 
restrict the behavior of a DES to a desired range, supervisory 
control theory initiated by Ramadge and Wonham [18] has 
been intensively investigated over the last decades (see, for 
example, [1], [7]). 

Usually, a DES is modelled by finite state automaton with 
events as input alphabets, and the behavior is thus the language 
generated by the automaton. Most of the published research 
on DES has been concentrated on systems that are modelled 
as deterministic automata or nondeterministic automata with 
e-transitions. A common feature of these models is that their 
state transitions are crisp once that corresponding events occur, 
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that is, no uncertainty arises in the state transitions. There 
are, however, situations in which the state transitions of some 
systems are always somewhat imprecise, uncertain, and vague 
even in a deterministic sense. A typical example given in 
[12], [13] is a person's health status, where the change of the 
condition of a person's health from a state, say "excellent", 
to another, say "good", is obviously imprecise, since it is 
hard to measure exactly the change. More examples will be 
encountered when we examine chemical reactions, mobile 
robots in an unstructured environment [14], intelligent vehicle 
control [19], wastewater treatment [21], and so on. 

Uncertainty arises not only in state transitions, but also in 
states themselves and control strategies. The notion of a fuzzy 
subset of a set introduced by Zadeh in 1965 [23] has been well 
applied to a wide range of scientific areas and has been proved 
to be a good method for representing uncertainty. To capture 
uncertainty appearing in states and state transitions of DES, 
Lin and Ying incorporated fuzzy set theory together with DES 
and thus extended crisp DES to fuzzy DES by proposing fuzzy 
finite automaton model in [12], [13]. Under the framework of 
fuzzy DES, they studied generalized observability and some 
optimal control problems. Taking into account the uncertainty 
associated with control strategies, Lavrov [10] introduced an 
enhancement of industrial control by combining discrete event 
supervisory control methods and fuzzy techniques. 

In recent years, fuzzy model such as fuzzy automata, fuzzy 
Petri nets, and fuzzy neural networks, as a complement to 
conventional models, has become an active research topic and 
found successful applications in many areas [2], [4], [16], 
[19], [21]. In terms of DES, fuzzy Petri net model has been 
investigated for many years [24], [5], [17]; however, to our 
knowledge, few efforts, except the work [12], [13], are made 
to consider the model and supervisory control following for 
fuzzy automata. 

The purpose of this paper is to develop supervisory control 
theory for fuzzy DES by extending traditional supervisory 
control theory for crisp DES. The generalized supervisory 
control theory describes a class of DES that state transitions 
are imprecise and uncertain by (maxmin) fuzzy automata 
introduced in [20]; the behavior of such systems is described 
by their generated fuzzy languages. Control is exercised by 
a fuzzy supervisor that disables events with certain degrees 
in the controlled system, the plant, so that the closed-loop 
system of supervisor and plant exhibits a pre-specified desired 
fuzzy language. We will introduce the notion of (fuzzy) 
controllability for fuzzy languages by generalizing crisp con- 
trollability, and present a necessary and sufficient condition 
for a fuzzy supervisor synthesis. When a desirable fuzzy 
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language is not controllable, we will investigate its supremal 
controllable fuzzy sublanguage and infimal controllable fuzzy 
superlanguage, and provide their expressions and algorithms. 
Our results contain those relevantly known characterizations 
of crisp DES, as expected. 

Several related researches should be distinguished before 
introducing the organization of the paper. The work presented 
here is a continuation of [12], [13], where the control problems 
studied are based on states and state sequences. We are now 
concerned with event feedback control with fuzzy supervisor; 
in addition, our fuzzy automaton model also differs from 
that of [12], [13]. Our fuzzy supervisor is similar to the 
probabilistic supervisor introduced in [11], but resultant plant 
dynamics are quite distinct from each other. Fuzzy languages 
are similar to probabilistic languages [15], [3], [8], but their 
semantics are different: the weight of a string in a probabilistic 
context reflects a frequency of occurrence, while the weight 
in a fuzzy context describes the membership grade (namely, 
uncertainty) of a string. It is well known that probability theory 
is not capable of capturing uncertainty in all its manifestations. 

The rest of the paper is organized as follows. In Section 
II, we sketch some basics of crisp DES control and fuzzy 
set theory. In Section III, we introduce the base model of 
fuzzy DES. The concept of generalized controllability and 
a controllability theorem for fuzzy languages are given in 
Section IV. Section V and VI are devoted to investigating 
the supremal controllable fuzzy sublanguage and the infimal 
controllable fuzzy superlanguage of an uncontrollable fuzzy 
language, respectively. The paper is concluded in Section VII 
with a brief discussion on the future research. 

II. Preliminaries 

In the following two subsections, we will briefly recall the 
background on supervisory control of crisp DES and a few 
basic facts on fuzzy set theory. 

A. Crisp Discrete Event Systems 

Let E denote the finite set of events, and E* denote the set 
of all finite strings constructed by concatenation of elements 
of E, including the empty string e. A string [i E E* is a prefix 
of a string u) E E* if there exists v E E* such that /iz/ = u. 
In this case, we write fj, < u>. For any lj E E* with length 
at least 1, we use to to denote the maximal proper prefix of 
to in what follows. In other words, ua = u> for some a E E. 
We write \u>\ for the length of a string u>. Any subset of E* 
is called a language over E. The prefix closure of a language 
L consists of the set of strings which are prefixes of strings 
in L. More precisely, the prefix closure of L, denoted by L, 
is defined by L = {^i E E* : fi < to for some lo E L}. A 
language L is said to be prefix closed if L = L. 

A DES, or plant, is usually described by a deterministic 
automaton: G = (Q, E, 5, qo), where Q is a set of states, with 
the initial state qo, E is a set of events, and 5 : QxE — > Q is a 
transition function (in general a partial function). The function 
S is extended to 5 : Q x E* — > Q in the obvious way. In a 
logical model of a DES, we are interested in the strings of 
events that the system can generate. Thus the behavior of a 



DES is modelled as a prefix closed language L(G) = {s E 
E* : S(q , s) is defined} over the event set E. 

The supervisory control theory partitions the event set of 
the system into the two disjoint sets of controllable and 
uncontrollable events, E c and E uc , respectively. A supervisor 
is a map S : L(G) — > 2 E such that S(s) D E uc for any string 
s E L(G). The language generated by the controlled system is 
denoted by L(S/G) which is defined inductively as follows: 

1) e e L(S/G); 

2) [(s E L(S/G)) and (sa E L(G)) and (a E S(s))] <S> 
[sa E L{S/G)\. 

Let us review the controllability definition of (crisp) lan- 
guages due to Ramadge and Wonham in [18]. 

Definition 1: A language K C L{G) is said to be control- 
lable (with respect to L(G) and E uc ) if 

KE UC n L(G) C K. 

The key existence result for a supervisor is the following 
[18]. 

Proposition 1: Given a nonempty language K C L(G), 
there exists a supervisor S such that L(S/G) = K if and 
only if K is controllable with respect to L{G) and E uc . 

A good property of controllable languages is that they are 
closed under arbitrary unions. Thus, for any language K, 
there exists the supremal controllable sublanguage of K [22], 
which is obtained by taking the union of all controllable 
sublanguages of K. Another somewhat weak property of 
controllable languages is that arbitrary intersections of prefix 
closed and controllable languages are again prefix closed and 
controllable. As a result, the intersection of all prefix closed 
and controllable suplanguages of K gives rise to the infimal 
prefix closed controllable suplanguages of K [9]. 

B. Fuzzy Set 

Assume now that X is a universal set. Then, every subset A 
of X can be uniquely represented by a so-called characteristic 
function \A ■ X — > {0, 1}, which is given by 

, . f 1, if x E A 
^(*) = { 0, ifx*A 

for any x E X. Thus the boundary of a set is required to be 
precise. That is, a set is a collection of things for which it is 
known whether any given thing is inside it or not. Contrary to 
classical crisp sets, fuzzy sets do not have sharp boundaries. 
That is, being a member of a fuzzy set is not a simple mater of 
being definitely in or definitely out: A member may be inside 
the set to a greater or lesser degree. For example, the set of 
tall people is a set whose exact boundary cannot be precisely 
determined. Suppose that we define all tall people as those 
having a height greater than or equal to 1.8 meters. Then a 
person whose height is 1.79 meters will not be considered 
a tall person. However, according to our intuition, there is 
no clear distinction between a person of 1.79 meters and a 
person of 1.8 meters in terms of the word "tall". If we allow 
that the same person be considered "tall" to some degree and 
be considered "not tall" to another degree, we will not be in 
a dilemma. 
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Each fuzzy subset (or simply fuzzy set), A, is defined in 
terms of a relevant universal set X by a function assigning to 
each element x of X a value A(x) in the closed unit interval 
[0, 1]. Such a function is called a membership function, which 
is a generalization of the characteristic function mentioned 
above; the value A(x) characterizes the degree of membership 
of x in A. Accordingly, a person is a member of the set "tall 
people" to the degree to which he or she meets the operating 
concept of "tall". 

The support of a fuzzy set A is a crisp set defined as 
supp(A) = {x : A(x) > 0}. Whenever supp(A) is a finite 
set, say supp(A) — {xi,X2,--- ,x n }, then fuzzy set A can 
be written in Zadeh's notation as follows: 

A(x n ) 



+ 



X\ X 2 

We denote by J-(X) the set of all fuzzy subsets of X. For 
any yl,S e ^(X), we say that A is contained in B (or B 
contains A), denoted by A C B, if A(x) < B(x) for all 
x G X. We say that A = B if and only if A C B and B C A. 
Obviously, we see that A C B implies supp(A) C supp(B); 
the latter is the usual set inclusion. A fuzzy set is said to be 
empty if its membership function is identically zero on X. We 
use O to denote the empty fuzzy set. 

For any family Aj, i G I, of elements of [0,1], we write 
Vi e /Ai or V{Ai for the supremum of {A^ : i 6 /}, 

and Ai^iXi or A{A^ : i 6 /} for its infimum. In particular, if 
I is finite, then V^/Aj and An=iXi are the greatest element 
and the least element in {Ai : i 6 /}, respectively. 

Let A, Be F{X). The M n/on of A and 23, denoted by AuB, 
is defined by the membership function 

(AuB){x)=A(x)VB(x) 

for all x E X; the intersection of .A and 23, denoted by ACiB, 
is given by the membership function 



(-4 fl B)(x) = A(x) A B(x) 



for all x EX. 



III. Formalism for Fuzzy Discrete Event Systems 

In this section, we introduce fuzzy automaton model and 
fuzzy languages generated by the model. 

As was mentioned in the introduction, we would like to 
formalize a class of DES, where the state sets are crisp 
and the state transitions are uncertain. We adopt a kind of 
fuzzy automata, which is known as maxmin automata in some 
mathematical literature [6], [20] and is somewhat different 
from max-product automata used in [12], [13], to model the 
systems. Formally, we have the following. 

Definition 2: A fuzzy automaton is a four-tuple G = 
(Q, E, S, q ), where: 

Q is a crisp (finite or infinite) set of states, 

E is a finite set of events, 

qo € Q is the initial state, and 

S is a function from Q x E x Q to [0, 1], called a fuzzy 
transition function. 

For any p, q 6 Q and a E E, we can interpret S(p, a, q) as 
the possibility degree to which the automaton in state p and 



with the occurrence of event a may enter state q. In our graph 
representation of automata later, S will be represented by arcs 
between states, and labels on the arcs. If p, q are states and 
a is an event such that 6(p, a, q) > 0, then we make an arc 
labelled a\5(p, a, q) from p to q. 

In contrast with crisp DES, an event in fuzzy DES may take 
the system to more than one states with different degrees. 
The concept of fuzzy automata is a natural generalization 
of nondeterministic automata. The major difference between 
fuzzy automata and nondeterministic automata is: in a non- 
deterministic automaton, S(p,a,q) is either 1 or 0, so the 
possibility degrees of existing transitions are the same, but 
if we work with a fuzzy automaton, they may be different. 

To describe what happens when we start in any state 
and follow any sequence of events, we define inductively an 
extended fuzzy transition function from Q x E* x Q to [0, 1], 
denoted by the same notation S, as follows: 



1, if q=p 
0, otherwise 



8(p,ua,q) = V reQ (5(p,u,r) A6(r,a,q)) 

for all u> G E* and a G E. 

The reason we use the maxmin rule in the previous defini- 
tion is that the state transition from p to q in a fuzzy process 
may be considered as water flow (gas, electricity, traffic flow, 
etc.) through a water supply system of which the water pipes 
are series-parallel inter-connected. 

Further, the language C(G) generated by G, called fuzzy 
language, is defined as a fuzzy subset of E* and given by 

C(G)(u) = V qeQ 5(q ,uj,q). 

This means that a string w of E* is not necessarily either 
"in the fuzzy language C(G)" or "not in the fuzzy language 
£(G)"; rather w has a membership grade C(G)(u), which 
measures its degree of membership in £(G). 

Without loss of generality, in this paper all automata are 
considered to be accessible, that is, all states are reachable 
from the initial state. 

If the state set of a fuzzy automaton G is empty, then 
necessarily C(G) = O, that is, C(G)(w) = for all u G E*; 
otherwise, it is obvious by the definition that C(G) has the 
following properties: 

PI) C(G)(e) = 1; 

P2) C{G){n) > C(G)(nv) for any p,,v G E* . 

Conversely, given a fuzzy language C (over the event set 
E) satisfying the above properties, we can construct a fuzzy 
automaton G = {Qc,Ec,Sc, qc), where 

Qc = supp(C), E c = E, q c = e, and 



0, 



if v = fia 
otherwise 



for all fi, v G supp(C) and a G E. There is no difficulty to 
verify that C(G) = C. 

Note that in the rest of the paper, by a fuzzy language we 
mean the empty language O or a fuzzy language satisfying 
the above properties PI) and P2), unless otherwise specified. 
In particular, the supports of such fuzzy languages are prefix 
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closed by the property P2). We use TL to denote the set of 
all fuzzy languages over E. More explicitly, TC = {A G 
F{E*) : A = O or A satisfies PI) and P2)}. 

Union and intersection of fuzzy languages can be defined 
as usual: 

(\J Ci){u>) = \Z ieI £i(uj), for all u G E*, and 

iei 

{[] d)(w) = AieiJCi(uj), for all uj e E* . 

iei 

The concatenation £i£ 2 of two fuzzy languages C\ and £ 2 
is defined by 

(£i£ 2 )(w) = V{£i(/x) A £ 2 (z/) : n,v E E* and /x^ = w}, 

for all u G £"\ We sometimes write (£i£ 2 )(u;) as 
V^ =w (£i(/i) A £ 2 (f)) for convenience. 

The following properties of fuzzy languages play an impor- 
tant role in the sequel. 

Proposition 2: If £1 and £ 2 are fuzzy languages, then C\ U 
£2, £1 (~l £2, and £i£ 2 are fuzzy languages. 

Proof: If £1 = O or £2 = O, then the proposition holds 
clearly. 

Assuming now that £1 and £2 are not empty, we show 
that £1 U £ 2 , £1 n £ 2 , and £i£ 2 satisfy the properties PI) 
and P2), respectively. By the definitions, it is obvious that 

(A U £ 2 )(e) = (A n £ 2 )(e) - (£i£ 2 )(e) = 1. 
For any /x, v G E*, we have that 

(AU£ 2 )H = £iOHv£ 2 (/^) 

< £i(/x) V£ 2 (/x) 
= (£iU£ 2 )(/x), 

and 

(An£ 2 )H = £i(Ha£ 2 (H 

< £i(/x) A£ 2 (/x) 

= (An^M 

For £i£ 2 , we have that (£i£ 2 )(/xz/) = V st=M „(£i(s) A 
£ 2 (i)) by definition. Since |/xt/| is finite, V s t =(LK ,(£i(s) A 
£ 2 (i)) is the maximum of {£i(s)A£ 2 (t) : s,t G £?* and si = 
/xi/}, which is denoted by £i(s ) A £ 2 (io)- To prove 
(£i£ 2 )(/i) > (£i£ 2 )(/xz/), it is sufficient to find out s' and t' 
that satisfy s't' = /x and d(s') A £ 2 (*') > £i(s ) A £ 2 (*o). 
since (£i£ 2 )(/x) = V s ' t '= M (£i(s') A C 2 {t')). If s < A*, say 
S0S1 = /i, then si < to- Taking s' = so and t' = si, we 
get that s't' = it and Ci(s') A £ 2 (t') > £i(s ) A C 2 (t ). If 
s is not a prefix of /x, then this means that /x < s . Then 
take s' = /x and t' = e. We can also get that s't' = zx and 
£i(s') A £ 2 (£') > £i(so) A £ 2 (to)^ tnus finishing the proof. 

■ 

For later need, we make the following observation that 
follows directly from definitions. 
Proposition 3: 

1) supp(Ci U £ 2 ) = supp(Ci) U supp(£ 2 ); 

2) supp(C\ fl £2) = supp(Ci) n supp(£ 2 ); 

3) supp(CiC 2 ) = supp(Ci)supp(C 2 ). 

Proof: The proof is evident and thus may be omitted. ■ 



In crisp DES, one can build the overall model by building 
models of individual components first and then composing 
them by product or parallel composition. We end this section 
by extending these operations to fuzzy automata. 

Given two fuzzy automata d = (Qi, Ei,Si 7 qoi) 7 i = 1,2, 
we define two operations on them: the product Gi x G 2 and 
the parallel composition G\ \\ G 2 . These operations model 
two forms of joint behavior of a set of fuzzy automata and we 
can think of them as two types of systems resulting from the 
interconnection of system components G\ and G 2 . 

The product of G\ and G 2 is the fuzzy automaton 

Gi x G 2 = (Qi x Q 2 , Ei n E 2 , 5, {q Q i,q Q2 )), 
where 

6((pi,qi),a, {p 2 ,q 2 )) = S 1 (p 1 ,a,p 2 ) A 6 2 (q 1} a,q 2 ) for all 
{Pi, q%) G Qi x Q 2 and a G E 1 n E 2 . 

As for crisp automata, it is easily verified that C(G\ x G 2 ) = 
£(Gi) n£(G 2 ). This shows that the intersection of two fuzzy 
languages can be implemented by doing the product of their 
automaton representations. 

The parallel composition of G\ and G 2 is the fuzzy 
automaton 

Gi || G 2 = (Qi x Q 2 , Ei U E 2 ,5, {q i, q 02 )), 
where S((pi, gi), a, (p 2 ,q 2 )) = 

5i(pi,a,p 2 ) AS 2 (qi,a, q 2 ), if 5i(pi, a,p 2 ) > 

and <5 2 (<7i, a, g 2 ) > 
< 5i(pi,a,p 2 ), if a G Ei\E 2 and gi = g 2 

5 2 (gi, a, g 2 ), if a G E 2 \E X and pi = p 2 

0, otherwise. 

If A = E 2 , then the parallel composition reduces to the prod- 
uct, since all fuzzy transitions are forced to be synchronized. 

IV. Controllability of Fuzzy Languages 

In this section, we first define fuzzy supervisor and the 
controllability of fuzzy languages. Based on the two basic 
definitions, we then study what controlled behavior can be 
achieved when controlling a fuzzy DES with a fuzzy supervi- 
sor. Some properties of controllable fuzzy languages are also 
included in the section. 

Our fuzzy DES model as described so far is simply a 
spontaneous generator of fuzzy event strings without a means 
of external control. In order to control a fuzzy DES, we 
postulate that certain events of the system can be disabled 
(i.e., prevented from occurring) with any degree when desired. 
This enables us to influence the evolution of the system by 
preventing from the occurrence degrees of some events at 
certain times. To model such control we partition the event set 
E into controllable and uncontrollable events: E = E c (jE uc , 
as usually done in crisp DES. However, unlike controllable 
events in crisp DES, a controllable event in fuzzy DES can 
be disabled with any degree. In other words, we allow that a 
controllable event in fuzzy DES can occur incompletely. But 
uncontrollable events can never be disabled. 

Control is achieved by means of a fuzzy supervisor, which 
is allowed to disable any fuzzy sets of controllable events after 
having observed an arbitrary string s G supp{C(G)). Formally, 
a fuzzy supervisor for G is a map S : supp{C(G)) — > T{E) 
satisfying S(s){a) = 1 for any s G supp(C{G)) and a G E uc . 
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The controlled system is denoted by S/G; the behavior of SJ G 
is the fuzzy language C s obtained inductively as follows: 

1) £ s (e) = l; 

2) C s {sa) = C(G)(sa) A S(s)(a) A C s (s) for any s G E* 
and a e E. 

The empty string e is always in supp(C ) since it is 
always contained in supp(C(G)); here we have excluded the 
degenerate case where G is the empty automaton. Clearly, 
it follows from the definition of C that C s C £(G) and 
£ s G JX. 

Before giving the key definition, we have to introduce a 
fuzzy subset £ uc of E* which is given by 



1, if u> G E uc 
0, if cj G 



Definition 3: A fuzzy language AC C £(G) is said to be 
controllable with respect to £(G) and -E^c if 

AC£ UC n £(G) C AC. 



The last expression reminds us of KE UC D L(G) C K in 
the controllability definition of crisp languages. Indeed, if all 
the membership grades in AC and C(G) are either or 1, then 
the two expressions are the same, since the supports of AC is 
prefix closed. 

It is clear that the fuzzy languages O and C(G) are 
always controllable with respect to £(G) and any E uc . Unless 
otherwise specified, controllability will always be with respect 
to £(G) and E uc , and we simply call AC controllable if the 
context is clear. Sometimes, we also write £ for £(G). For 
convenience, we will exclude the special discussions on the 
empty fuzzy language in the proofs of our results since O is 
trivial and the results are obvious. 

We first make the following observation from Definition [3] 

Proposition 4: A fuzzy language AC is controllable if and 
only if AC(s) A C(G)(sa) = AC(sa) for any s G E* and a G 
E uc - 

Proof: Suppose that AC is controllable. Using the con- 
trollability definition and a G E uc , we have that AC(s) A 
£(G)(sa) = (K.£ uc n£(G))(sa) < AC(sa). On the other hand, 
it is clear that AC(sa) < AC(s) A £(G)(sa). This yields that 
JC(s) A £(G)(sa) = AC(sa). 

Conversely, assuming that AC(s) A C(G)(sa) = K,(sa) for 
any s G E* and a G E uc , we need prove that K,£ uc H 
£(G) C AC, namely (K£ uc n C{G))(w) < K{u) for any 
ui G E* . If |u>| = 0, namely u> = e, then it is obvious that 
(££ uc n = < K(w). In the case of \u\ > 0, 

we can write u> as Coa for some a G E. Further, if a G E c , 
then it is also obvious that (JC£ UC H £(G))(w) = < AC(w); 
otherwise, by assumption we have that (ACf uc n C(G))(ui) = 
AC(w) A L{G)(ujo) = AC(o)a) = AC(w). Overall, we get that 
(JC£ uc r\£(G))(u)) < AC(cj) for any to G E*, thereby finishing 
the proof. ■ 

Proposition 0] thus provides an equivalent definition of the 
controllability of fuzzy languages. 

The following theorem shows us when a desired fuzzy 
language can be synthesized through a fuzzy supervisor. 



Theorem 1: Let AC C £(G), where AC is a nonempty fuzzy 
language. Then there exists a fuzzy supervisor S for G such 
that C s — AC if and only if AC is controllable. 

Proof: First we prove the sufficiency by constructing a 
desired fuzzy supervisor. For any s G supp(C(G)), define 
S(s) according to 



S(s)(a) 



1, if a G E uc 

fC(sa), if a G E c 



for all a G E. Obviously, S is a fuzzy supervisor. 

We claim that C s = AC, which will be proved by induction 
on the length of the strings s. 

• The basis step is for strings of length 0, namely, s = e. By 
assumption, AC is a nonempty fuzzy language, so AC(e) = 1 by 
definition. On the other hand, we always have that C s (e) = 1 
by definition. Thus the basis step is true. 

• Assume that for all strings s with \s\ < n, we have that 
C (s) = AC(s). We now prove the same for strings of the form 
sa, where a G E. If s £ supp(C(G)), then £(G)(s) = 0. 
Therefore £(G)(sa) = by the definition of fuzzy languages. 
Noting that £ s C £(G) and AC C £(G), we obtain that 
C s (sa) = AC(sa) = 0. If s G supp(C(G)), then we can define 
S(s) as above, and two cases arise. 

Case 1: a G E uc . In this case, we get that S(s)(a) = 1 by 
definition. Thus, 

£ 5 (sa) = £(G)(sa) A SO) (a) A C s {s) (by definition) 

= £(G)(sa) A£ 5 (s) 

= £(G)(sa) A AC(s) (by induction hypothesis) 

= AC(sa) (by Proposition |4j, 

i.e., C (sa) = AC(sa). 

Case 2: a G E c . Using the definition of S(s) and the 
induction hypothesis, we have the following: 

£ s (sa) = £(G)(sa) AS{s)(a) A£ 5 (s) 
= £(G)(sa) AAC(sa) A£ 5 (s) 
= £(G)(sa) AAC(sa) AAC(s) 
= £(G)(sa) AAC(sa) 
= AC(sa), 

that is, C s (sa) = JC(sa). The claim has been proved, thus 
finishing the proof of the sufficiency. 

Next, to see the necessity, suppose that there is a fuzzy 
supervisor S for G such that £ s = AC. To show the con- 
trollability of AC, by Proposition |4] it suffices to prove that 
£ 5 (s) A £(G)(sa) = £ s (sa) for any s G E* and a G E uc . 
In fact, by definition we have that C s (sa) = £(G)(sa) A 
S(s){a) A C s {s) = C s (s) A £(G)(sa) since S(*)(a) = 1 for 
a G E uc - This completes the proof of the theorem. ■ 

Remark 1: From the proof of the sufficiency of Theorem[2 
we find that such a fuzzy supervisor is not unique in general. 
That is, if there exists a fuzzy supervisor, say So, such that 
C Sa = AC, then there are generally more than one fuzzy 
supervisors satisfying the requirements. In fact, more fuzzy 
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supervisors can be constructed by 



s £ E* and a S E uc , we have that 



500(a) = 



1, if a e E uc 

IC(sa), if a e E c and 

£(sa) A /C(s) > JC(sa) 
x e [JC(sa), 1], if a G i? c and 

£(sa) A /C(s) = JC(sa). 



Imitating the above proof of the sufficiency, we can easily 
prove that C s = JC. 

For the sake of illustrating the above theorem and remark, 
let us consider a very simple example. 

Example 1: Let E = {a, b} and E uc = {b}. £ and JC are 
given by 



£ 



K 



0.9 


0.7 


0.7 


a 




aa 


ab 


0.8 


0.7 

1 


0.7 


a 


aa 


1 — r 
ao 



+ 



0.5 
afea ' 



Take a fuzzy supervisor 5 as follows: 

a/ \ 0.8 1 0.7 1 

5(e) = — + -, 5(a) = — + -, 
a b a b 



S(aa) = S(ab) = S(aba) = — h —■ 

a b 

Then we see that £ s = JC. In fact, we can also achieve this 
aim by taking the following fuzzy supervisor: 



5(e) = 



0. 



S(ab) 



5(a) 

i 1 

o 



a; 
a 



S(aa) 



S(aba) 



1 

6' 



where x G [0.7, 1] and y, z G [0, 1]. 

Based on Theorem [2 we can now formulate the following 
Supervisory Control Problem (SCP) for fuzzy DES: 

SCP: Given fuzzy DES G with event set E, uncontrollable 
event set E uc C E, and two fuzzy languages £ a and Ci, where 
O ^ £ Q C £; C C(G), find a fuzzy supervisor 5 such that 

£a C £ S C £,. 

Here, £ a describes the minimal acceptable behavior and £; 
describes the maximal legal behavior. SCP requires to find a 
fuzzy supervisor such that the behavior of controlled system is 
both acceptable and legal. A complete solution to this problem 
will be given at the end of Section VI. 

The following fact shows that controllable fuzzy languages 
are closed under arbitrary unions and intersections, respec- 
tively. 

Proposition 5: If fuzzy languages /Q, i € /, are control- 
lable, then so are (J /Q and |~| /Q. 

iei iei 

Proof: For simplicity, we prove the case that / is finite. 
There is no difficulty to generalize the proof to infinite index 
set. If /Ci and IC2 are controllable fuzzy languages, then by 
Proposition |2 we know that K\ U JC2 and K\ H K2 are fuzzy 
languages. We first show that JC\ U/C2 is controllable. For any 



(£1 U/C 2 ) (s) A C{sa) 
= {]C 1 (s)VK 2 (s))AC(sa) 
= (£i(s) A C(sa)) V (/C 2 (s) A C(sa)) 
— K,\ (sa) V IC2 (sa) (by controllability) 

= ftuK 2 )H, 

that is, (/CiU/C 2 )(s)A/:(sa) = (/CiU/C 2 )(sa). Hence, /C1U/C2 
is controllable by Proposition |^ Similarly, one can prove that 
/Ci (~1 K.2 is controllable. Thus the proposition follows when / 
is finite. ■ 

Let us turn now to discussing what can be done when 
the given fuzzy language K, is uncontrollable. If K. is not 
controllable, then it is natural to consider the possibility of 
approximating K. by some controllable fuzzy languages. As 
in crisp DES, two questions arise: Is there the "largest" 
controllable fuzzy sublanguage of /C, and is there the "least" 
controllable fuzzy superlanguage of JC, where "largest" and 
"least" are in terms of fuzzy set inclusion. Both answers are 
positive, and we address the two questions in the subsequent 
two sections, respectively. 

For later need, we define the class of controllable fuzzy 
sublanguages of K. and the class of controllable fuzzy super- 
languages of JC as follows: 

%ub(IC) = {M E TC : M C K and M is controllable}; 

%u P (IC) = {M S TC : JC C M C C and M is controllable}. 

Observe that O £ c <9 S ub{K,) and C £ ^ S up(fC), so the two 
classes are not empty. 

V. Supremal Controllable Fuzzy Sublanguage 

This section is devoted to finding the "largest" controllable 
fuzzy sublanguage of fC mentioned above and discussing its 
calculation when JC is not controllable. 

Define JO = [J A4. Then the existence of the 

M£tf 3ub (IC) 

largest controllable fuzzy sublanguage of JC follows from the 
following. 

Proposition 6: The fuzzy language JC' is the largest con- 
trollable fuzzy sublanguage of JC. 

Proof: The assertion follows directly from Proposition 
■ 

Since by definition M C JO for any M G c (f su b(JC), we 
call JO the supremal controllable fuzzy sublanguage of JC. If 
JC is controllable, then JC' — JC. In the "worst" case, JC' = O. 
We will refer to "f" as the operation of obtaining the supremal 
controllable fuzzy sublanguage. 

Several useful properties of the operation are presented in 
the following proposition. 

Proposition 7: Let JC\ , /C 2 € T C 

1) If tCi C JC 2 , then JC\ C JC\. 

2) (Kx n/c 2 ) T - JC\ n/c|. 

3) ^ U/C 2 C (£1 U/C 2 )T. 

1) It is clear by the definition of the operation f , 
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2) Using 1), we get that (Id n /C 2 ) T C £| and (/Ci n 
/C 2 ) T C /C|, so (/Ci n /C 2 ) T C /Cj n /C|. By contradiction, 
suppose that (/Ci n /C 2 )^ £ /C| (~l /C|. Then there exists 
s G E* such that (Id n /C 2 ) T (s) < JC[(a) A /C|(s), that 
is, ICj(s) > (Id n /C 2 ) T (s) for i = 1,2. By definition, 
/Cj(s) = V{X 4 (s) : At, G %ub(ICi)} and (£i n /C 2 ) T (s) = 
V{Af(s) : M G %ub(fci n /C 2 )}. Therefore there is at 
least one M[ £ % u b(JCi) such that M'^s) > M(s) for 
all Ai G c ^aubiK'\ n /C 2 ). Otherwise, it contradicts with 
/Cj(s) > (A:in/C 2 ) T (s). Hence (AlinAt 2 )(s) > .M(s) for all 
M G % ub (ldnlC2). Observe that A^nA^ G ^(XiH/Ca) 
since M[ H Af 2 C /Ci n /C 2 and Afi n A( 2 is controllable 
by Proposition |5] Taking At = Af^ fl Af 2 , then we get 
(M[ n > (Xi n M' 2 )(s), which is absurd. Thus 

(id n/c 2 ) T = n/c|. 

3) By 1), we obtain that £j C (/C : U /C 2 ) t and /C| C 

(id u/c 2 ) T , so /cj u *cj c (/Ci ua: 2 ) t . ■ 

Remark 2: In gener al, £| U/C| = (ACi U/C 2 ) T cannot hold. 
For example, let 

r ,-, „ 1 0.8 0.5 
£ = E uc = {a, b}, C = - + — + — , 
tab 

1 0.7 0.5 J ^ 1 0.8 0.4 

JCi = - H h — , and /C 2 = — I h — . 

e a b e a b 

Then £|u/C| =OUO = C, whereas (/CiU/C 2 ) T = £ T = £. 

Next, we wish to give an explicit expression of the mem- 
bership function associated with Id. For this purpose, let us 
first define inductively an auxiliary fuzzy subset IC of E*\ 



IC(sa) = 



0. 

1, 

ic(s 

t(s 



if fC(w) < C(lu) 
otherwise; 



for some uj G E* 



A K.(sa), if a 6 E uc 

A K(sa) A X(sa), \f a E E c 



for all s G E* and a £ E, where we use X(sa) to denote 
A{/C(i) : t G saE* uc and fC(t) < C(t) A /C(?)} and use the 
abbreviation saE* c for {s}{a}E* c . Recall that for any s G E* 
with |s| > 1, we use s to denote the maximal proper prefix of 
s. If {IC(t) : t G sa£:; c and AC(t) < £(t) A K(t)} = 0, then 
we set X(sa) = 1. 

Our aim now is to show that fC' = IC. To this end, it is 
convenient to have the following lemmas. 

Lemma 1: IC G .T^X. 

Proof: By the above definition, it is clear that IC G 
F(E*). If /C(e) = 0, then by induction on the length of 
strings we can easily get that fC(s) = for any s G -E 1 *. 
Thus /C is the empty fuzzy language when /C(e) = 0. In the 
case of tC(e) — 1, note that by definition we always have 
tC(sa) < K.(s). This implies that IC satisfies the property P2). 
Hence we also have that IC G T C when ft(e) = 1, finishing 
the proof. ■ 

Lemma 2: K,(s) A fC(sa) — K(s) A C(sa) for any s <E E* 
and a G E uc . 

Proof: If /C(e) = 0, then we have that AC = O from the 
proof of Lemma [T] So t(s) A /C(sa) = /C(s) A C(sa) = 0. 

Let us consider the other case IC(e) = 1. Two subcases need 
to be discussed: 



Subcase 1: s G S* c . Since AC(e) = 1, we know by definition 
that /C(cj) = C(uj) for all w G £J* C . Thus /C(sa) = £(sa) 
because of a G B ttc . Consequently, AC(s) A IC(sa) = IC(s) A 
C(sa). 

Subcase 2: s ^ E* c . In this subcase, s can be written 
uniquely as s = [icv for some \i G E* , c G -E c , and ^ G i?* c . 

If |^| = 0, namely, s = /ic, then by definition we have the 
following: 

fc(s)AtC(sa) = t(pc) AK(tica) 

= IC(fi) A /C(/ic) A A(/xc) A IC(iica) =: (1) 

/C(s) A £(sa) = K.(fj,c) A £(/xca) 

= t(p)MC(fic)AX(nc)AC(ixca)=:(2). 

Clearly, fC(fj,ca) < C(fica) A /C(/ic). When IC(fica) = 
C(fj,ca) A /C(/ic), we get that 

(1) = A /C(/xc) A A(/ic) A ^(Aica) = (2). 

If lC(iMca) < £(fica) A lC(fic), then 

A(/zc) = A{/C(t) : i G /ic£* c and /C(t) < £(*) A /C(i)} 

< K-(fica) 

< £(/ica). 

Hence, 

(1) = A /C(/xc) A A(/ic) = (2). 

If \v\ > 0, say \v\ = n, then we have that v = v\v 2 ■ ■ ■ v n 
for some V{ G S^c- Thus by definition we obtain that 

/C(s) = K,(iicv\V2 ■ ■ ■ v n ) — lC((xc) A fC(s). 

So we get that 

fC(s) AlC(sa) = K.(fic) A tC(s) A K(sa) 

= K.(fi) A K,(fxc) A A(/ic) A /C(s) A lC(sa) 

= t(n) A A(/xc) A /C(s) A IC(sa) =: (3) 

and 

^(s)A£(sa) = K(fj,c) A /C(s) A C(sa) 

= K.(fi) A K(iac) A A(/xc) A /C(s) A C(sa) 

= t(n) A A(/ic) A IC(s) A £(sa) =: (4). 

If lC(sa) = C(sa) A K(s), then we see that 

(3) = A X(fic) A K(s) A C(sa) = (4). 

If )C(sa) < C(sa) A )C(s), then 

A(/xc) = A{£(t) : i G [icE* c and /C(i) < £(t) A K(t)} 

< }C(iicv\Vi ■ ■ ■ v n a) 
= IC(sa) 

< C(sa). 

This gives rise to 

(3) = t{j£) A X(fic) A JC(s) = (4). 

Overall, we have that JC(s) A K.(sa) = IC(s) A C(sa) for any 
s G E* and a G -E uc , and the proof is completed. ■ 
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Lemma 3: Suppose that M. C C is controllable and Ai ^ 

0. Then M(ji) = C(p) for any fx G E* c . 

Proof: It is clear that M(e) = C(e) = 1 since M ^ O. 
Assume that Ai(p) = C(p) for all strings p £ E* c with 
\p\ < n. For any a £ E uc , we have that 

M(pa) — M(p) A £(/ia) (by the controllability of .M) 
= C(p) A C(pa) (by induction hypothesis) 

= £(M a ), 

1. e., Ai(pa) — C(pa), finishing the proof. ■ 

Based upon the above three lemmas, we now verify the fact 
below. 

Theorem 2: lO = JC. 

Proof: Let us first show that JC C JO . It suffices 
to verify that JC £ ^ sub {JC) = {M £ TC : C 
JC and M. is controllable }. By Lemma Q we see that JC is 
a fuzzy language; moreover, JC C JC by the definition of JC. It 
remains only to show that JC is controllable. For any s £ E* 
and a £ E uc , we see that JC{s) A C(sa) = JC(s) A IC(sa) = 
JC(sa) from Lemma |3 and the definition of JC. Therefore, it 
follows from Proposition [4] that JC is controllable. 

For the reverse inclusion, take any M. £ c tf su b(!C). It is 
enough to prove that M. C JC; we prove it by showing that 
Ai(s) < IC(s) for any s £ E*. Use induction on the length 
of s. 

In the basis step, namely, s = e, if M.(e) = or /C(e) = 
1, then it is obvious that Ai(e) < AC(e). Suppose now that 
M(e) = 1 and /C(e) = 0. By JC(e) = 0, we know that there 
exists /i £ E* c such that AC(^) < C(p). So X(^) < JC(p) < 
C{p), which contradicts with Lemma [3] Hence we have that 
A4(s) < tC(s) in the basis step. 

The induction hypothesis is that A4(s) < IC(s) for all 
strings s satisfying \s\ < n. We now prove the same for 
strings of the form sa. By contradiction, let us suppose that 
Ai(sa) > IC(sa) for some a £ E. If a £ E uc , then by 
definition and the induction hypothesis we get that fC(sa) = 
ft(s) A fC(sa) > M(s) A M(sa) = M(sa). This contradicts 
with the assumption that A4(sa) > tC(sa). If a £ E c , then 
ft(sa) — lC(s) A K.(sa) A A(sa) by definition. Since /C(s) > 
M(s) > M{sa), tC(sa) > M(sa), and M{sa) > K.(sa), we 
see that K,(sa) = X(sa). That is, 

JC(sa) = A{JC(t) : t £ saE* c and JC(t) < C{t) A fC(t)}. 

Since Ai(sa) > K,(sa), there by the definition of infimum 
exists t £ saE* c satisfying /C(t ) < ^(^o) A tC(t ) such that 
tC(to) < A4(sa). Obviously, to / sa; otherwise, it contradicts 
with Ai C fC. Thus we can write to = sav\Vi ■ ■ ■ v m for some 
Vi £ E uc , where m > 1. By the controllability of A4, we see 
that M(t ) = M(t ) A C(t ) = M(t ) A JC(t ) A C(t ). 
Using repeatedly Proposition 0] we can obtain that M(to) = 
M(sa) A £(f ). Thus M(t ) = M(sa) A C(t ) A K(t ) A 
C(t ) = M(sa)AtC(t ) A£(t ). Noting that M[sa) > JC(t ) 
and tC(to) A £(to) > fC(to) by the previous arguments, we see 
that M(t a ) > JC(to), which contradicts with M C /C again. 
The proof of the induction step is finished, and the proof of 
the theorem is also completed. ■ 



According to Theorem |2] we obtain an explicit expression 
of the membership function associated with KJ, as promised; 
however, it seems to be difficult to give a compact formula 
for JO when JC is not controllable. Here we provide an upper 
bound for supp(JC^). Before doing this, we have to define the 
quotient of (crisp) languages. Let L\,Li C E* . The quotient 
operation L\jL% is defined as follows: 

Li/L 2 = {s £ E* : st £ L\ for some t £ L 2 }- 

Proposition 8: 

supp(JC^) C supp(JC)\[(supp(C)\supp(JC)) I E* C ]E* . 
Proof: If supp(JC^) = 0, namely, JO = O, 
then the proposition evidently holds; otherwise, take any 
s £ supp(JC^). By contradiction, assume that s £ 
supp(JC)\[(supp(C)\supp(JC)) I E* C ]E* . This means that s £ 
[(supp(£)\supp(JC)) I E^ C ]E* since s £ supp(JC^) C 
supp(IC). Thus there exist 8\, s 2 £ E* , and /i £ E* c such that 
s = S\S2 and si/i £ supp(C), but si/i ^ supp(IC). Obviously, 
fi 7^ e. Otherwise it contradicts with the fact that supp(IC) 
is prefix closed. So we may suppose that /i = [i\p, 2 ■ ■ ■ p, n 
for some £ E uc , where n > 1. Further, using recursively 
Proposition |4] we have that /C^(si/z) = /C^(si) A C(si/i). 
Noting that si < s £ supp(lO) and sip, £ supp(C), we see 
that & (si/i) > 0, which contradicts with s\pL $ supp(JC). As 
s was arbitrary, the proposition has been proved. ■ 

Remark 3: The upper bound for supp(lO ) is optimal in 
the sense that it can be achieved by some fuzzy languages. 
However, the reverse inclusion in Proposition [8] is not true in 
general, as shown by the following example. 

Example 2: Let E — {a, b, c} and E uc — {b}. C and K, are 
given by 

£(e) = C{a) = 1, C(c) = 0.5, C(ab n ) = 1/n for any n > 1; 
/C(e) = K(a) = 1, K(ab n ) = l/(n+ 1) for any n > 1. 

One can use the definition of IC to get that /C^ = 1/e, so 
supp(IC^) = {e}. However, the right side of Proposition [8] 
equals supp(JC) = {e, a, a6"}, where n > 1. 

We next provide an algorithm to compute lO . For simplic- 
ity, we assume that JC and C are deterministic regular for the 
moment, that is, JC and C are generated by deterministic finite 
state fuzzy automata, respectively. 

Let G — (Q,E,S,q ) and H = (P, E,5h,Po) be deter- 
ministic finite state fuzzy automata that generate C and JC, 
respectively, i.e., C(G) — C and C(H) — JC, where it is 
assumed that JC C C(G). 

Algorithm for JO : 

Step 1): Let H = {P ,E,6 Ho ,( Po ,q )) = H x G. Thus 
C(Ho) = IC. States of Ho will be denoted by pairs (p, q). Let 
i = 0. 

Step 2): Compare Hi with G. For each (p, q) £ Pi, if 
^Hi ((p, q), a, (p', q')) — for some (p',q r ) £ P x Q and 
a £ -Euc, but S(q,a,q') > 0, then remove (p, q) and all its 
associated transitions from Hi. Take the accessible operation 
to give rise to flj+i. 

Step 3): If no states were removed from flj+i in Step 2), 
go to Step 4). Else, set i <— i + 1 and go to Step 2). 
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6|0.4 



Figure 1: Automata for Example 3. 



Step 4): If Hi + i is the empty automaton, then we set H' = 
H l+1 and STOP. 

If there is a path u> consisting of uncontrollable events and 
beginning with the initial state (po,qo) of Hi + \ such that 
£ff <+ i((po,go),w, {p',q')) < S{q ,uj,q'), then we let H' be 
the empty automaton and STOP, too. 

Otherwise, we reassign membership grades of control- 
lable events appearing in the transitions of -f/j+i. If 
8n i+1 ({po, <7o), s &, (p', q')) > 0' where s 6 E* and a is a 
controllable event and, say, connects (p s , q s ) and (p 1 , q'), then 
set S H i+1 ((P s '1 s )' a ' (pW)) = S H t+1 {(Ps,qs),a,{p',q')) A 
9(sa). Here 6(sa) = A{S Hi+1 ((>', q'), p,, (p M , g M )) : < 
fe« +1 ((pW)>M, (2W/0) < S{q',fi,q^) and £ £* c }. Note 
that by the definition of extended fuzzy transition function, 
the set of distinct membership grades is finite. Thereby, the 
process is guaranteed to converge in finite steps. Repeat for all 
controllable events appearing in the transitions of Hi+x, and 
call the resulting automaton H'. 

Step 5): C(H') = JO . 

We give a simple example that illustrates the above algo- 
rithm. 

Example 3: Let E = {a, 6} and E uc — {6}. The au- 
tomata G and H that generate C and JC are depicted in 
Figure 1, respectively. Observe that 5(3,6,2) > 0, whereas 
S Ho ((D,3),b, (C,2)) = 0. So we remove (D,3) and the 
associated transition from H , namely H x G, and find that 
no more states need to be removed. Then we reassign the 
membership grade of a according to Step 4), and thus get H' . 

The following theorem verifies the correctness of the above 
algorithm. 

Theorem 3: Let C, JC, G, Hi, H' be as in Algorithm for lO . 
Then C(H') = /C T . 

Proof: By Theorem|2] it suffices to prove that C(H') = 
ft, i.e., C(H')(s) = }C(s) for all s € E* . We prove it by 
induction on the length of s. 

For s — e, we know by definition that /C(e) = if and only 



if there exists oj £ E* c such that tC(ui) < C(uj). If one of these 
io such that C(Hi)(uj) = 0, then Steps 2) and 3) force that H' 
is the empty automaton; otherwise, these lu survive in 
then by Step 4) we have that H 1 is also the empty automaton. 
Hence C{H'){e) = 0. Conversely, if C(H')(e) = 0, then it 
follows immediately that H' is the empty automaton. By the 
above algorithm, we know that there must be w e E* c such 
that JC{uj) < C(ui). Consequently, IC(e) = 0, which establishes 
the basis step. 

For the induction step, suppose that C(H')(s) = tC(s) for 
all s G E* with \s\ < n. Let us consider sa. Note that fuzzy 
automata under consideration are deterministic finite. Thus if 
a S E uc , then by construction and induction hypothesis we 
obtain that 

C(H')(sa) = £(H')( S )A5 H ,(( Ps ,q s ),a,(p',q')) 
= £(s)AS H ,((p s ,q s ),a,(p',q')) 
= /C(s) A 6 H „((Ps,q s ),a, (p',q')) 
= t(s) A JC(s) A S Ho ({p s ,q s ), a, (p', q')) 
= t{s)AK,(sa) 
= IC(sa), 

that is, C(H')(sa) = K.(sa). If a £ E c , then by definitions 
we have that 

C(H')(sa) = £(H')(s)A6 H ,((p s ,q s ),a,(p',q')) 

= fC{s) AS Ht+1 ((p s ,q s ),a,{p',q')) A0(sa) 
= t(s)A5H ((j> s ,q s ),a,(p , ,q , ))Ae(sa) 
= t{8) A K{s) A S Ho (( Ps ,q s ),a, (p', q 1 )) 

A0(sa) 
= t(s) A JC(sa) A 9(sa), 

and IC(sa) = fC(s) A JC(sa) A \(sa). By construction and the 
definitions of 6(sa) and X(sa), it is easy to show that IC(sa)A 
0(sa) — IC(sa) A X(sa). Thus we also get that £(H')(sa) = 
IC(sa) when a € E c . This completes the proof. ■ 

VI. Infimal Controllable Fuzzy Superlanguage 

In parallel with the last section, we now study the "least" 
controllable fuzzy superlanguage of K, mentioned earlier and 
its calculation when JC is not controllable. 

Let us define A> = p| M.. Similar to Proposition 

[6] we have the following result which shows us the existence 
of the least controllable fuzzy superlanguage of JC. 

Proposition 9: The fuzzy language /C^ is the least control- 
lable fuzzy superlanguage of JC. 

Proof: It follows directly from Proposition [5] ■ 

Since by definition JC^ C M. for any M € ^^(/C), we 
call JC^ the infimal controllable fuzzy superlanguage of JC. If 
JC is controllable, then JC^ — JC. In the "worst" case, IC^ — C. 

Let us proceed to find more characterizations of JCK 

In order to give a compact formula for JC^, we introduce a 
new fuzzy subset £* c of E*, which is given by 



l, ifwe£* 

0, otherwise. 
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We make the following observation on £* c . 
Lemma 4: (IC£* c )(sa) = (/C£* c )(s) for any s G E* and 
a e E uc . 

Proof: By definition, we know that (JC£* c )(s) = 
V SlS2=s (AC( Sl ) A £* c (s 2 )) and (K£* c )(sa) 
V t 1 t 2 =sa{fc{ti) A £^(£2))- Since \s\ is finite, we can assume 
that V SlS2=s (X(si)A£* c (s2)) = jC(s[) A £* c (s' 2 ) for some si 
and s' 2 satisfying s' 1 s' 2 = s. Setting t[ = s[ and t' 2 — s' 2 a, we 
have that t[t' 2 = sa and K(t' x ) A £* c (t' 2 ) = JC(s[) A £* c (s' 2 ). 
As a result, (K£* c )(sa) = Vt lta = aa (/C(ti) A £J e (t 2 )) > 
A ^ c (* 2 ) - A £* c (4) = that is, 

(/C£* c )(sa) > (AC£* c )(s). On the other hand, we observe that 
IC£* C G from Proposition so (AC£* c )(sa) < (K£* c )(s), 
thus finishing the proof. ■ 
For later need, we define inductively another fuzzy subset 
AC of E* as follows: 
AC(e) = 1; 



AC(set) 



JC(sa), if a £ £ c 

AC(s) A £(sa), if a G E uc 



for all s G E* and a G E. 

We first present a compact formula for AC. 

Proposition 10: IC = K.£* c n £; furthermore, AC G .F£. 
Proof: We prove the first part by induction on the length 
of strings s. In the case of s = e, we see that AC(e) = 
(IC£* C Pi £)(e) — 1, so the basis step holds. Assume that 
AC(s) = (AC£* C n £)(s) for all strings s with |s| < n. Now 
consider the case of sa, where a G E. In the subcase of 
a G i? c , we know that K,(sa) — IC(sa) by definition. On 
the other hand, (JC£* C n £)(sa) = /C(sa) A £(sa) = /C(sa). 
Consequently, IC(sa) — (IC£* C D £)(sa) when a G S c . In the 
other subcase a £ E uc , we have that 

tt(sa) = JC (s) A £(sa) (by definition) 

= (/C£ * c (~l £)(s) A £(sa) (by induction hypothesis) 

= K)( S )A£( S )A£H 



show that K,(sa) < K.(sa) for any o £ E. If a £ _E C , then 
JC(sa) — K(sa) by definition. If a G £ uc , then we obtain that 

/C(sa) < K(s) A £(sa) 

< K.(s) A £(sa) (by assumption) 
= K.(sa) (by definition). 

Therefore the induction step holds, too. It remains to prove 
that K, is controllable. In fact, for any s G E* and a G S uc , 
we always have that /C(s) A £(sa) = K,(sa) by the definition 
of Hence, AC is controllable by Proposition |4] and thus 

IC G < To SU p{fC). 

Next, we prove the other direction of the inclusion, namely, 

Taking any X G % up (lC), we claim that /C£™ n £ C 
for any nonnegative integer m, where £™ stands for the 
concatenation of m copies of £ uc . We prove it by induction 
on m. If m = 0, it is obvious that IC Pi £ C M. since K. C A4. 
Suppose that the claim holds for m. Let us consider the case 
m+1. Clearly, we see that (A:f™ +1 n£)(e) = < 1 = M(e), 
and {K£™ +1 n £)(sa) = < X(sa) for any s £ E* and 
a G B c . If a G E uc , then we have that 



and 



(ACC)MA£(sa) 

(/Cf * c )(s) A £(sa) (by Lemma 0. 



Hence we also have that IC(sa) = {IC£* C (~l £)(sa) when a G 
S uc . This completes the proof of the first part. 

The second part follows from the first part and Proposition 
|2j since IC, £* c , and £ are fuzzy languages. ■ 

Our intention of defining IC is to represent A^ ; we establish 
the following theorem. 

Theorem 4: K} — K,. 
Proof: We first show that K)- C IC. It is sufficient to 
verify that K G % up (IC) = {M G ^£ : IC C M C 
£ and is controllable}. By Proposition [K)] we have that 
IC G .F£ and IC C £. In order to show that AC C AC, we 
prove that AC(s) < AC(s) by using induction on the length 
of strings s. Obviously, the case s — e holds. Assuming 
that AC(s) < AC(s) for all strings s with \s\ < n, we next 



(ACC +1 n£)( S a) 



(JC£Z)(s)A£(sa) 
= (ACO(s)A£( S )A£( S a) 

(since £(s) > £(sa)) 
= (AC£"n£)( S )A£( S a) 
< M{s)A£(sa) 

(by induction hypothesis) 
= M(sa) (by the controllability of M), 

i.e., (AC£™ +1 n£)(sa) < M(sa). So the case of m+1 holds, 
finishing the proof of the claim. 

For any s G we now prove that AC(s) < A4(s). By 
Proposition 1101 we get that 

AC( S ) = (ACC)(s)A£(s) 

= [V SlS2=s (AC( Sl )A^ c ( S2 ))]A£( S )=:(5). 

Since |s| is finite, there exist and s' 2 satisfying s[s 2 = s 
such that V SlS2=a (£(si)A£* c (s 2 )) = AC^) A^ c (^). Hence, 

(5) = K(j1)AC(^)A£(«) 

= A4 S i'(4) A£(s) 

< (AC£i s i')(s) A£(s) 
= {K£l9 n£)(s) 

< M(s). 

The last inequality follows from the foregoing claim that 
K£™ DC C M. Thereby AC C M. Furthermore, since M 
was arbitrary, we obtain that AC C p| = AC^. Thus 

the proof of the theorem is completed. ■ 
Summarily, we have obtained the following characteriza- 
tions of the least controllable fuzzy superlanguage AC^ of AC. 



Theorem 5: AC^ 



M = IC£* C n £. More 



n 

Me r € sup (K) 

explicitly, AC^ can be defined inductively as follows 
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IC l (e) = 1; 

^ ' ~ \ IC l {s) AC(sa), ifaeE uc 

for all s G E* and a E E. 

Using the above theorem, we can obtain the support of K} 
from those of /C and C. 

Corollary 1: supp(IC^) — supp(K,)E* c fl supp(C). 
Proof: Note that supp(£* c ) = E* c by definition. The 
proof follows directly from Theorem [5] and Proposition [3] ■ 

Based on Theorem |5] we now present an algorithm for the 
computation of K.- 1 from automata H and G that generate K, 
and C, respectively. 

Let H = (Q H ,E, 8 H ,q 0H ) and G = (Q, E, 5, q ). 
Algorithm for K.K- 

Step 1). Build a fuzzy automaton that generates IC£* C as 
follows. Add a new state q a to Qh- For all q G QirU{g a } and 
all a G -Bmc, add an arc with label a\l from q to q a . Call the 
resulting automaton Hi. More formally, Hi = (Qi,E, 6i,qoi) 
is given by 

Qi = Qh U {g Q }, g i = 9o, and 

{S H {p,a,q), if p,qeQ H 
1, if a G S uc and g = g Q 

0, otherwise. 

Step 2). Take the product operation Hi x G. Then it follows 
immediately that C(Hi x G) = /C 1 . 

The correctness of this algorithm is easily verified once 
one observes that Step 1) serves to the concatenation and the 
Kleene closure in Theorem [5] 

The following example illustrates the algorithm. 

Example 4: Let E = {a, b} and E uc — {b}. The automata 
G and H that generate C and K, are depicted in Figure 
2, respectively. By adding a new state N and associated 
transitions in H, we get Hi; further, we have the automaton 
Hi x G that generates K,^. 

Now, with the help of Theorem[5]we can prove the following 
fact. 

Proposition 11: Let /Ci,/C2 G J- C. 

1) If /Ci C JC 2 , then JCj C K> 2 . 

2) (£i n/Cz) 1 = 

3) (KiUKa) 1 = K\\AK\. 

Proof: The assertion 1) is clear by the definition of K} . 
The assertions 2) and 3) can be proved in the same way using 
induction on the length of strings, so we only prove 2). Using 
Theorem|5l we have that {Ki n/C 2 ) J -(e) = 1 = (K[ D /C^)(e). 
Suppose that 2) holds for all strings s with |s| < n, namely, 

now consider the case 
of sa. If a G £" c , then by Theorem [5] we get that (/Ci fl 
/C2) x (sa) = {JCi n /C 2 )(sa) = /Ci(sa) A /C 2 (sa) = /C}(sa) A 
/C^(sa) = (/C| fl /Cj )(sa). If a G E uc , then by induction 
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(B,l) (N,0) 



Figure 2: Automata for Example 4. 

hypothesis and Theorem [5] we have that 

(/Ci n/C 2 ) ; (sa) = (£1 n/C^Os) A£(sa) 

= (/C| nK%) (s) A £(sa) 

= K,{(s) A K^(s) AC(sa) 

= (IC[ (s) A £(sa)) A (IC'2 (s) A £(sa)) 

= /Cj (sa) A/C^ (sa) 

= (/Cj n/C^)(sa), 

finishing the proof of 2). ■ 
Recall that SCP mentioned in Section IV requires us to 
find a fuzzy supervisor S for the fuzzy DES G such that 
the behavior of controlled system lies between the minimal 
acceptable behavior C a and the maximal legal behavior Li. 
We end this section with the solution to SCP. 

Theorem 6: The following statements are equivalent: 

1) SCP is solvable; 

2) C a CCj; 

3) CiQU 

Proof: We only prove that 1) and 2) are equivalent. The 
equivalence of 1) and 3) can be proved similarly. 

1) =>2). Since SCP is solvable, there exists a fuzzy supervi- 
sor S such that C a C C s C Ci. By Theorem^ we see that C s 
is controllable. So £ ST = C s C d; furthermore, £ ST C Ci . 
Consequently, £ a C £J . 

2) =>1). Obviously, C, is nonempty and controllable. Thus 
by Theorem ^ there exists a fuzzy supervisor S such that 
C s — Cj . From the condition C a C £j and the fact £j C 
we obtain that C a C £ s C £/. Hence, SCP is solvable. ■ 

VII. Conclusion 

In this paper, we have formalized the supervisory control 
theory for fuzzy DES which have been modelled by (maxmin) 
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fuzzy automata, by extending the prior supervisory control 
theory for crisp DES in a natural way. The behavior of fuzzy 
DES has been described by fuzzy languages; the supervisors 
are event feedback and fuzzy. The control objective in this 
setting is to find a fuzzy supervisor such that the controlled 
system only generates legal strings which must occur with cer- 
tain minimum membership grades. Our framework generalizes 
that of Ramadge-Wonham and reduces to Ramadge-Wonham 
framework when membership grades in all fuzzy languages 
must be either or 1. 

In the present framework, we have focused on controlled 
behavior that can be achieved when controlling a fuzzy DES 
G with a full-observation fuzzy supervisor S. Further research 
on supervisory control under partial observation is the subject 
of work in progress. In addition, if we restrict the behavior 
of a fuzzy DES G to a non-fuzzy "threshold language": 
L(0) = {uj : uj G E* and £(G)(oj) > 9}, where < 6 < 1, 
the corresponding supervisory control may be of interest. A 
potential application of the supervisory control theory for 
fuzzy DES in this paper goes to the design and analysis of 
dynamic control systems whose behavior or control rules are 
acquired from experience of human experts and described in 
natural languages. 
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